Hi, On Mon, Feb 18, 2013 at 1:03 PM, Sahil ModGill <[email protected]> wrote: > First of all take an image of your partition and the use Encase (free > edition) or any other data recovery tool but don't play with original HDD.
Do not recommend proprietary software on this mailing list. Also follow the mailing list guidelines[1] by not top posting. Interleaved, trimmed posting style is the recommended one. > It may decrease the chances of data recovery. > > For further references, kindy follow the below mentioned links: > http://www.linuxforu.com/2012/05/how-to-recover-deleted-files-linux-1/ > http://www.linuxlinks.com/article/20100226122928107/DataRecovery.html > > http://www.linuxforu.com/2011/03/digital-forensic-analysis-using-backtrack-part-1/ > > http://www.linuxforu.com/2011/04/digital-forensic-analysis-using-backtrack-part-2/ > > http://www.linuxforu.com/2011/09/recover-deleted-files-in-linux/ As mentioned in the articles listed, TestDisk/PhotoRec are good tools to try recovering the data. It is good to reduce the chances of the blocks containing the deleted data from being overwritten by taking an image and then trying the tools on it. [1] - http://ilugc.in/mailinglist-guidelines Thanks & Regards, Guruprasad _______________________________________________ ILUGC Mailing List: http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
